Compliance Engineer

Exponential-e; Langley Burrell; On-site; GBP 65,000 - 95,000; Full time

Job summary

Exponential-e is seeking a Security Compliance Specialist to guide the operational implementation of controls for compliance with ISO27001, CAF, CIS Benchmarks, NIS, and IEC 62443. You will define policies, support project teams, and coordinate audits across OT and IT environments.

The role focuses on mapping regulatory objectives to technical controls and delivering customer-aligned compliance reports as part of service delivery.

Qualifications

• Strong knowledge of regulatory standards and industry frameworks.
• Experience mapping objectives to technical controls.
• Ability to coordinate audits and reporting.

Responsibilities

• Define and maintain operational policies for compliance across OT/IT security.
• Provide technical compliance guidance to project and engineering teams.
• Coordinate audits and manage compliance reporting.

Skills

Regulatory frameworks

Security governance

Tools

CAF (NCSC)

CIS Benchmarks

ISO27001

NIS

IEC 62443

Job description

Overall purpose of the job:

Provide specific guidance on the operational implementation of controls to support compliance against the following:

• ISO 27001 – Security Management
• Cyber Assessment Framework (CAF)
• Network Information Systems (NIS)
• Centre for Internet Security (CIS) Benchmarks
• IEC 62443

Key responsibilities for this job:

• Define and maintain operational policies, standards, and procedures for compliance against OT and IT security frameworks
• Provide technical compliance guidance to project and engineering teams during new builds and ongoing operations.
• Support the handover and implementation of compliance processes, procedures and controls within operational engineering teams, as part of service implementation or transition
• Map compliance framework objectives to technical controls within the scope of supported assets under contract.
• Ensure adherence to regulatory frameworks (e.g., CAF, ISO, CIS, IEC 62443).
• Ensure adherence to customer contractual compliance obligations.
• Coordinate audits and manage compliance reporting.
• Implement continuous monitoring processes for compliance and risk indicators.
• Provide regular customer aligned reports on compliance status.

Knowledge and experience required:

Strong knowledge of regulatory standards and industry frameworks, including:

• Centre for Internet Security (CIS) benchmarking
• Network and Information Systems (NIS)
• National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF)
• ISO Standards – particularly ISO27001 (Information Security Management)
• IEC 62443 – especially risk management elements